← Qlause Cyber Aware · International edition
Module 5 · 10:43 video + 10-question quiz · free video
Business Email Compromise and Payment Fraud
The con that moves money without a virus or a link: the four set-ups behind most payment fraud, how criminals get into a real mailbox, why the tell is the request and not the address, the call-back rule on a number you already have, the two-person payment process, and what to do in the first minutes if money has gone.
The scenario
Friday, 15:40 — a supplier's real address says their bank has changed. R386,450 later, the real supplier phones on Monday.
The habit this module drills
The call-back rule.
After this module you can
- ✓Recognise the four set-ups behind most payment fraud.
- ✓Verify any new or changed bank details by calling a number you already have — and hold the payment until you have.
- ✓Keep to the two-person payment process, even when the deadline or the boss says otherwise.
- ✓Report fast — and if money has gone, call the bank within minutes.
What this module evidences: ISO/IEC 27001:2022 clause 7.3 (awareness) and Annex A control A.6.3 (information security awareness, education and training); the staff-awareness and security duties in data-protection law (for example GDPR Articles 32 and 39). The quiz result is recorded against your account, and passing it earns this module’s dated certificate.
Module 5 quiz
Ten “what would you do” scenario questions. Pass mark 80% — retake as often as you like. Pass it and this module’s certificate is issued in your name with the date; it is due again in twelve months. The quizzes and certificates come with a 12-month licence — for one person or for your company.
Loading…